Skip to content

Strip sensitive user fields#4302

Open
bozicovichsantiago20-oss wants to merge 1 commit into
SecureBananaLabs:mainfrom
bozicovichsantiago20-oss:codex/strip-sensitive-user-fields
Open

Strip sensitive user fields#4302
bozicovichsantiago20-oss wants to merge 1 commit into
SecureBananaLabs:mainfrom
bozicovichsantiago20-oss:codex/strip-sensitive-user-fields

Conversation

@bozicovichsantiago20-oss

Copy link
Copy Markdown

Summary

  • strip password and passwordHash from created user objects
  • ensure listed users are returned without sensitive password fields
  • add a focused service regression test for create/list behavior

Fixes #4301

Tests

  • node --test apps/api/src/tests/*.test.js
  • npm test --workspace apps/api currently fails because the existing script runs node --test src/tests, which Node tries to resolve as a module directory instead of the test files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

User service should not expose password fields

1 participant